This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/HLTduf-gq3i_SomcD8FRPp7OD-k.roa File: HLTduf-gq3i_SomcD8FRPp7OD-k.roa (raw, json) Hash identifier: R989OAlaQLW3ec/mxouzOwlF3EKe5DF2mSPbEefH2go= Subject key identifier: 1C:B4:DD:B9:FF:A0:AB:78:BF:4A:89:9C:0F:C1:51:3E:9E:CE:0F:E9 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019A43D599F98A498EFD45DA1B77CE9980DC Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/HLTduf-gq3i_SomcD8FRPp7OD-k.roa Signing time: Sun 02 Nov 2025 09:11:03 +0000 ROA not before: Sun 02 Nov 2025 09:11:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49444 IP address blocks: 91.92.244.0/24 maxlen: 24 91.92.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:43:d5:99:f9:8a:49:8e:fd:45:da:1b:77:ce:99:80:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Nov 2 09:11:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1cb4ddb9ffa0ab78bf4a899c0fc1513e9ece0fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:14:f1:7d:15:4a:6e:57:c5:6b:9d:49:81:6d: 10:1f:3a:42:da:d4:b2:e2:aa:ba:3a:fd:5a:1f:7d: 03:f9:51:99:f2:9a:d5:1c:be:79:28:69:ba:4b:59: e6:b1:74:26:5d:59:93:5f:be:c3:e2:68:10:66:4b: 61:19:2b:02:2d:73:50:a6:30:4d:cb:23:1d:7e:55: 1b:1c:98:6b:44:38:6d:c4:5a:99:48:12:e8:f5:e7: ad:b2:55:30:b4:67:66:c7:6b:f4:1b:50:f8:a6:43: 5f:61:d0:2e:42:24:ef:c9:3c:75:f6:5b:ae:d8:bc: f0:df:29:d8:63:c6:82:41:ae:97:e6:30:a5:9c:86: 5c:ba:29:80:46:1c:5e:4e:a9:9a:1c:0d:6b:70:69: 37:9d:05:76:61:34:3a:8e:fe:fc:ab:f9:34:90:d4: 6b:d4:de:38:6e:81:07:97:0e:0a:bd:c8:f6:02:70: b9:71:b0:7d:ec:f8:0e:65:96:b3:a4:37:55:0d:da: 4c:b1:3f:22:a4:62:fa:b5:0c:4c:ad:4a:d2:8d:5b: 92:b4:8a:c9:57:a6:4f:80:be:4e:5a:99:88:63:53: ee:b0:de:60:06:67:37:b1:79:d9:0a:ea:d0:13:9e: 49:67:95:66:57:2b:86:ea:a7:dc:dc:43:b0:97:f3: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:DD:B9:FF:A0:AB:78:BF:4A:89:9C:0F:C1:51:3E:9E:CE:0F:E9 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/HLTduf-gq3i_SomcD8FRPp7OD-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.244.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:21:68:92:3a:59:0c:6f:13:f3:4b:d9:6d:2d:7c:90:c0:37: de:22:5a:56:94:81:da:22:52:ad:6b:8d:fe:6d:26:a6:a4:a6: a5:85:64:10:ca:ff:58:a7:2b:de:8c:67:39:28:29:b9:9c:78: 8c:2e:6a:bd:e6:e1:72:3c:b1:64:4d:e9:ba:50:ed:81:e8:0c: 4c:ae:f6:18:93:af:ed:ae:fb:c5:97:c6:33:62:98:d7:c9:67: 31:c3:e8:34:66:01:6f:19:7b:eb:22:d1:af:d8:88:32:a6:a6: 6a:83:05:04:73:68:40:35:5d:9d:99:a2:15:ee:d8:74:13:08: 03:d7:01:ec:a9:9f:fc:aa:95:03:f1:d5:c9:ac:d4:57:75:9b: 3a:5f:e1:d1:b7:3e:15:e7:bd:e4:06:b6:96:02:17:f3:01:7b: 9b:e6:cc:4e:6a:77:19:a2:94:08:67:76:08:d0:e5:c9:aa:ee: 15:5e:b6:f6:cb:de:29:9c:64:5a:7e:d5:fa:86:88:cc:d2:46: f8:54:64:7e:81:56:1a:04:d1:26:b5:c0:53:35:7f:25:f7:e0: 49:60:06:cb:ca:28:b7:05:7d:37:7e:86:83:92:56:3d:42:eb: e0:7e:62:c2:9b:53:44:6c:2f:d6:b8:7f:fc:3c:04:1b:99:bd: 4f:b4:bb:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpD1Zn5ikmO/UXaG3fOmYDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMTAyMDkxMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2I0ZGRiOWZmYTBhYjc4YmY0YTg5OWMwZmMxNTEzZTllY2UwZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xTxfRVKblfFa51JgW0QHzpC2tSy 4qq6Ov1aH30D+VGZ8prVHL55KGm6S1nmsXQmXVmTX77D4mgQZkthGSsCLXNQpjBN yyMdflUbHJhrRDhtxFqZSBLo9eetslUwtGdmx2v0G1D4pkNfYdAuQiTvyTx19luu 2Lzw3ynYY8aCQa6X5jClnIZcuimARhxeTqmaHA1rcGk3nQV2YTQ6jv78q/k0kNRr 1N44boEHlw4Kvcj2AnC5cbB97PgOZZazpDdVDdpMsT8ipGL6tQxMrUrSjVuStIrJ V6ZPgL5OWpmIY1PusN5gBmc3sXnZCurQE55JZ5VmVyuG6qfc3EOwl/M+bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBy03bn/oKt4v0qJnA/BUT6ezg/pMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvSExUZHVmLWdxM2lfU29tY0Q4RlJQcDdPRC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW1z0MA0G CSqGSIb3DQEBCwUAA4IBAQCeIWiSOlkMbxPzS9ltLXyQwDfeIlpWlIHaIlKta43+ bSampKalhWQQyv9YpyvejGc5KCm5nHiMLmq95uFyPLFkTem6UO2B6AxMrvYYk6/t rvvFl8YzYpjXyWcxw+g0ZgFvGXvrItGv2IgypqZqgwUEc2hANV2dmaIV7th0EwgD 1wHsqZ/8qpUD8dXJrNRXdZs6X+HRtz4V573kBraWAhfzAXub5sxOancZopQIZ3YI 0OXJqu4VXrb2y94pnGRaftX6hojM0kb4VGR+gVYaBNEmtcBTNX8l9+BJYAbLyii3 BX03foaDklY9QuvgfmLCm1NEbC/WuH/8PAQbmb1PtLtA -----END CERTIFICATE-----Generated at Fri Dec 5 08:36:46 2025 by rpki-client